Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/a39496-99a1-4c18-94a3-c170c65f0938/1/5UhKt1Cby72jUeIACRdC1DNms0c.mft
File: 5UhKt1Cby72jUeIACRdC1DNms0c.mft (raw, json)
Hash identifier: /ZFzBC88OFJ6m0C9n65enoMjYCLhBJJlM50igSH4zX0=
Subject key identifier: 7A:4A:F7:B8:88:47:5B:37:2B:E3:78:E6:56:C8:AC:48:81:9D:80:5C
Authority key identifier: E5:48:4A:B7:50:9B:CB:BD:A3:51:E2:00:09:17:42:D4:33:66:B3:47
Certificate issuer: /CN=e5484ab7509bcbbda351e200091742d43366b347
Certificate serial: 0194BC04F0114A8CE412658A17A725FB9773
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5UhKt1Cby72jUeIACRdC1DNms0c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/a39496-99a1-4c18-94a3-c170c65f0938/1/5UhKt1Cby72jUeIACRdC1DNms0c.mft
Manifest number: 0F86
Signing time: Fri 31 Jan 2025 11:00:27 +0000
Manifest this update: Fri 31 Jan 2025 11:00:27 +0000
Manifest next update: Sat 01 Feb 2025 11:00:27 +0000
Files and hashes: 1: 5UhKt1Cby72jUeIACRdC1DNms0c.crl (hash: NgsVqAfyaF8fHL7F8lCSsP5aZdH+NbCX6Lem2gR/CFc=)
2: wJBjAczRrgGosNqanCxFfo-dFjI.roa (hash: cA7B9NV3PGLqMbvMdkJgYrBm37cd4VUUTrn9CCk7CJw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:f0:11:4a:8c:e4:12:65:8a:17:a7:25:fb:97:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5484ab7509bcbbda351e200091742d43366b347
Validity
Not Before: Jan 31 11:00:27 2025 GMT
Not After : Feb 1 11:00:27 2025 GMT
Subject: CN=7a4af7b888475b372be378e656c8ac48819d805c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:7b:20:c1:e9:f0:a3:ef:b0:80:62:b3:72:c2:
af:c5:d5:46:ea:e1:b3:ea:38:50:ea:a4:12:88:93:
25:62:a0:d0:e2:c9:57:ed:6d:38:58:62:fa:56:33:
a0:88:bb:e8:64:6b:d4:be:1b:99:1f:c8:48:d9:4f:
f0:de:a7:6e:8f:ef:5e:38:5f:ab:28:18:ae:16:5a:
d7:f2:1d:08:a3:5b:89:37:cb:6a:31:53:32:54:a6:
ee:37:40:03:c1:75:ed:db:36:53:ea:9d:8b:94:f7:
27:37:50:3b:d4:d3:e5:cf:a6:40:d1:65:47:07:7f:
a9:d0:7f:92:a6:a8:3e:17:1d:b3:0c:70:53:41:bd:
b2:06:22:2f:aa:3e:58:35:70:26:ec:a7:dd:40:96:
7c:43:5e:a4:e5:40:23:b4:d6:6c:b7:92:ae:4f:dc:
35:93:52:71:8e:29:48:27:7a:4a:11:6c:9a:94:ce:
46:fa:e8:f8:24:89:9f:e9:36:0a:7c:e5:f3:38:78:
f3:86:da:79:34:16:ff:43:10:86:82:25:6f:34:20:
58:13:da:25:7a:1e:1b:60:4f:84:af:ea:0e:18:8e:
91:c1:63:17:ff:49:19:28:77:b2:ca:c1:99:40:34:
81:ac:ce:1c:7d:b2:92:2b:75:a1:ea:d9:08:35:1b:
bd:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:4A:F7:B8:88:47:5B:37:2B:E3:78:E6:56:C8:AC:48:81:9D:80:5C
X509v3 Authority Key Identifier:
keyid:E5:48:4A:B7:50:9B:CB:BD:A3:51:E2:00:09:17:42:D4:33:66:B3:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5UhKt1Cby72jUeIACRdC1DNms0c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/a39496-99a1-4c18-94a3-c170c65f0938/1/5UhKt1Cby72jUeIACRdC1DNms0c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/a39496-99a1-4c18-94a3-c170c65f0938/1/5UhKt1Cby72jUeIACRdC1DNms0c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d3:b8:c1:17:6c:8c:28:cf:1c:6c:70:3e:77:37:97:13:e6:2b:
25:06:fe:8c:30:23:e0:8d:65:99:3a:b5:20:43:64:ed:7c:f9:
2c:b9:4b:11:ec:50:db:6a:8e:61:0f:a9:24:44:3b:5a:07:d9:
a4:9b:7d:22:10:bd:ab:30:28:f7:c8:a3:d9:2d:f0:64:05:fc:
16:ed:c2:5f:dd:95:0e:a1:60:75:38:4c:1c:fa:91:cf:4e:86:
0d:68:92:e3:d0:07:03:90:aa:eb:a9:67:79:cc:e9:49:ba:f8:
6c:10:70:53:7b:a6:2c:0d:0c:bf:f7:44:41:f1:06:d8:6a:a3:
84:43:a8:94:9a:a9:62:8a:43:8e:02:e2:42:2b:8c:ee:9f:27:
e7:3f:6b:37:16:8d:5a:a3:c9:14:ac:27:c9:b6:39:5c:65:33:
f5:8a:a2:fc:dc:31:b9:dd:b9:f3:41:09:13:98:71:25:e6:5a:
38:ef:9e:b8:63:86:c7:4e:4e:b3:6f:2e:3f:8d:8b:e7:27:e1:
f5:d0:d6:55:76:01:6d:ea:98:87:73:fc:91:b4:df:e1:9a:09:
a0:f4:21:e5:53:fa:e7:36:8e:28:f5:96:eb:f0:a6:4b:6e:03:
23:9f:94:d9:87:53:be:92:81:5f:7f:06:f6:81:35:c5:a5:78:
65:83:93:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:39:31 2025 by rpki-client